Skip to content

Commit

Permalink
feat: Add 'custom_keys' in rate_based_statement
Browse files Browse the repository at this point in the history
  • Loading branch information
@uyggnodoow
uyggnodoow committed Dec 31, 2024
1 parent 71d758b commit 4a3c5be
Show file tree
Hide file tree
Showing 2 changed files with 195 additions and 3 deletions.
101 changes: 98 additions & 3 deletions main.tf
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4164,9 +4164,7 @@ resource "aws_wafv2_web_acl" "this" {
}

dynamic "headers" {
for_each = lookup(field_to_match.value, "headers", null) == null ? [] : [
lookup(field_to_match.value, "headers")
]
for_each = lookup(field_to_match.value, "headers", null) == null ? [] : [lookup(field_to_match.value, "headers")]
content {
match_scope = lookup(headers.value, "match_scope")
oversize_handling = lookup(headers.value, "oversize_handling")
Expand Down Expand Up @@ -8004,6 +8002,103 @@ resource "aws_wafv2_web_acl" "this" {
header_name = lookup(forwarded_ip_config.value, "header_name")
}
}
dynamic "custom_key" {
for_each = lookup(rate_based_statement.value, "custom_key", null) == null ? null : lookup(rate_based_statement.value, "custom_key")
iterator = custom_key

content {
dynamic "cookie" {
for_each = lookup(custom_key.value, "cookie", null) == null ? [] : [lookup(custom_key.value, "cookie")]

content {
name = lookup(cookie.value, "name")

dynamic "text_transformation" {
for_each = lookup(cookie.value, "text_transformation")
content {
priority = lookup(text_transformation.value, "priority")
type = lookup(text_transformation.value, "type")
}
}
}
}
dynamic "forwarded_ip" {
for_each = lookup(custom_key.value, "forwarded_ip", null) == null ? [] : [lookup(custom_key.value, "forwarded_ip")]
content {}
}
dynamic "header" {
for_each = lookup(custom_key.value, "header", null) == null ? [] : [lookup(custom_key.value, "header")]

content {
name = lookup(header.value, "name")

dynamic "text_transformation" {
for_each = lookup(header.value, "text_transformation")
content {
priority = lookup(text_transformation.value, "priority")
type = lookup(text_transformation.value, "type")
}
}
}
}
dynamic "http_method" {
for_each = lookup(custom_key.value, "http_method", null) == null ? [] : [lookup(custom_key.value, "http_method")]
content {}
}
dynamic "ip" {
for_each = lookup(custom_key.value, "ip", null) == null ? [] : [lookup(custom_key.value, "ip")]
content {}
}
dynamic "label_namespace" {
for_each = lookup(custom_key.value, "label_namespace", null) == null ? [] : [lookup(custom_key.value, "label_namespace")]
content {
namespace = lookup(label_namespace.value, "namespace")
}
}
dynamic "query_argument" {
for_each = lookup(custom_key.value, "query_argument", null) == null ? [] : [lookup(custom_key.value, "query_argument")]

content {
name = lookup(query_argument.value, "name")

dynamic "text_transformation" {
for_each = lookup(query_argument.value, "text_transformation")
content {
priority = lookup(text_transformation.value, "priority")
type = lookup(text_transformation.value, "type")
}
}
}
}
dynamic "query_string" {
for_each = lookup(custom_key.value, "query_string", null) == null ? [] : [lookup(custom_key.value, "query_string")]

content {
dynamic "text_transformation" {
for_each = lookup(query_string.value, "text_transformation")
content {
priority = lookup(text_transformation.value, "priority")
type = lookup(text_transformation.value, "type")
}
}
}
}
dynamic "uri_path" {
for_each = lookup(custom_key.value, "uri_path", null) == null ? [] : [lookup(custom_key.value, "uri_path")]

content {
dynamic "text_transformation" {
for_each = lookup(uri_path.value, "text_transformation")
content {
priority = lookup(text_transformation.value, "priority")
type = lookup(text_transformation.value, "type")
}
}
}
}

}
}
dynamic "scope_down_statement" {
for_each = lookup(rate_based_statement.value, "scope_down_statement", null) == null ? [] : [lookup(rate_based_statement.value, "scope_down_statement")]
content {
Expand Down
97 changes: 97 additions & 0 deletions modules/rule-group/main.tf
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4003,6 +4003,103 @@ resource "aws_wafv2_rule_group" "this" {
header_name = lookup(forwarded_ip_config.value, "header_name")
}
}
dynamic "custom_key" {
for_each = lookup(rate_based_statement.value, "custom_key", null) == null ? null : lookup(rate_based_statement.value, "custom_key")
iterator = custom_key

content {
dynamic "cookie" {
for_each = lookup(custom_key.value, "cookie", null) == null ? [] : [lookup(custom_key.value, "cookie")]

content {
name = lookup(cookie.value, "name")

dynamic "text_transformation" {
for_each = lookup(cookie.value, "text_transformation")
content {
priority = lookup(text_transformation.value, "priority")
type = lookup(text_transformation.value, "type")
}
}
}
}
dynamic "forwarded_ip" {
for_each = lookup(custom_key.value, "forwarded_ip", null) == null ? [] : [lookup(custom_key.value, "forwarded_ip")]
content {}
}
dynamic "header" {
for_each = lookup(custom_key.value, "header", null) == null ? [] : [lookup(custom_key.value, "header")]

content {
name = lookup(header.value, "name")

dynamic "text_transformation" {
for_each = lookup(header.value, "text_transformation")
content {
priority = lookup(text_transformation.value, "priority")
type = lookup(text_transformation.value, "type")
}
}
}
}
dynamic "http_method" {
for_each = lookup(custom_key.value, "http_method", null) == null ? [] : [lookup(custom_key.value, "http_method")]
content {}
}
dynamic "ip" {
for_each = lookup(custom_key.value, "ip", null) == null ? [] : [lookup(custom_key.value, "ip")]
content {}
}
dynamic "label_namespace" {
for_each = lookup(custom_key.value, "label_namespace", null) == null ? [] : [lookup(custom_key.value, "label_namespace")]
content {
namespace = lookup(label_namespace.value, "namespace")
}
}
dynamic "query_argument" {
for_each = lookup(custom_key.value, "query_argument", null) == null ? [] : [lookup(custom_key.value, "query_argument")]

content {
name = lookup(query_argument.value, "name")

dynamic "text_transformation" {
for_each = lookup(query_argument.value, "text_transformation")
content {
priority = lookup(text_transformation.value, "priority")
type = lookup(text_transformation.value, "type")
}
}
}
}
dynamic "query_string" {
for_each = lookup(custom_key.value, "query_string", null) == null ? [] : [lookup(custom_key.value, "query_string")]

content {
dynamic "text_transformation" {
for_each = lookup(query_string.value, "text_transformation")
content {
priority = lookup(text_transformation.value, "priority")
type = lookup(text_transformation.value, "type")
}
}
}
}
dynamic "uri_path" {
for_each = lookup(custom_key.value, "uri_path", null) == null ? [] : [lookup(custom_key.value, "uri_path")]

content {
dynamic "text_transformation" {
for_each = lookup(uri_path.value, "text_transformation")
content {
priority = lookup(text_transformation.value, "priority")
type = lookup(text_transformation.value, "type")
}
}
}
}

}
}
dynamic "scope_down_statement" {
for_each = lookup(rate_based_statement.value, "scope_down_statement", null) == null ? [] : [lookup(rate_based_statement.value, "scope_down_statement")]
content {
Expand Down

0 comments on commit 4a3c5be

Please sign in to comment.